cacti/graph_json.php

<?php
/*
 +-------------------------------------------------------------------------+
 | Copyright (C) 2004-2026 The Cacti Group                                 |
 |                                                                         |
 | This program is free software; you can redistribute it and/or           |
 | modify it under the terms of the GNU General Public License             |
 | as published by the Free Software Foundation; either version 2          |
 | of the License, or (at your option) any later version.                  |
 |                                                                         |
 | This program is distributed in the hope that it will be useful,         |
 | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
 | GNU General Public License for more details.                            |
 +-------------------------------------------------------------------------+
 | Cacti: The Complete RRDtool-based Graphing Solution                     |
 +-------------------------------------------------------------------------+
 | This code is designed, written, and maintained by the Cacti Group. See  |
 | about.php and/or the AUTHORS file for specific developer information.   |
 +-------------------------------------------------------------------------+
 | http://www.cacti.net/                                                   |
 +-------------------------------------------------------------------------+
*/

// since we'll have additional headers, tell php when to flush them
ob_start();

$guest_account = true;
$auth_json     = true;
$gtype         = 'png';

require('./include/auth.php');
require_once(CACTI_PATH_LIBRARY . '/rrd.php');

api_plugin_hook_function('graph_image');

// set the json variable for request validation handling
srv('json', true);

// ================= input validation =================
gfrv('graph_start');
gfrv('graph_end');
gfrv('graph_height');
gfrv('graph_width');
gfrv('local_graph_id');

if (isrv('graph_nolegend')) {
	srv('graph_nolegend', 'true');
}

gfrv('graph_theme', FILTER_CALLBACK, ['options' => 'sanitize_search_string']);

cacti_session_close();

$graph_data_array = [];

// override: graph start time (unix time)
if (!ierv('graph_start') && grv('graph_start') < FILTER_VALIDATE_MAX_DATE_AS_INT) {
	$graph_data_array['graph_start'] = grv('graph_start');
}

// override: graph end time (unix time)
if (!ierv('graph_end') && grv('graph_end') < FILTER_VALIDATE_MAX_DATE_AS_INT) {
	$graph_data_array['graph_end'] = grv('graph_end');
}

// override: graph height (in pixels)
if (!ierv('graph_height') && grv('graph_height') < 3000) {
	$graph_data_array['graph_height'] = grv('graph_height');
}

// override: graph width (in pixels)
if (!ierv('graph_width') && grv('graph_width') < 3000) {
	$graph_data_array['graph_width'] = grv('graph_width');
}

// override: skip drawing the legend?
if (!ierv('graph_nolegend')) {
	$graph_data_array['graph_nolegend'] = grv('graph_nolegend');
}

// print RRDtool graph source?
if (!ierv('show_source')) {
	$graph_data_array['print_source'] = grv('show_source');
}

// disable cache check
if (isrv('disable_cache')) {
	$graph_data_array['disable_cache'] = true;
}

// set the theme
if (isrv('graph_theme')) {
	$graph_data_array['graph_theme'] = cacti_validate_theme(grv('graph_theme'));
}

if (isrv('rra_id')) {
	if (gnrv('rra_id') == 'all') {
		$rra_id = 'all';
	} else {
		$rra_id = gfrv('rra_id');
	}
} else {
	$rra_id = null;
}

$graph_data_array['graphv'] = true;

// Determine the graph type of the output
if (!isrv('image_format')) {
	$type   = db_fetch_cell_prepared('SELECT image_format_id
		FROM graph_templates_graph
		WHERE local_graph_id = ?',
		[grv('local_graph_id')]);

	switch($type) {
		case '1':
			$gtype = 'png';

			break;
		case '3':
			$gtype = 'svg+xml';

			break;
		default:
			$gtype = 'png';

			break;
	}
} else {
	switch(cacti_strtolower(gnrv('image_format'))) {
		case 'png':
			$graph_data_array['image_format'] = 'png';

			break;
		case 'svg':
			$gtype = 'svg+xml';

			break;
		default:
			$gtype = 'png';

			break;
	}
}

$graph_data_array['image_format'] = $gtype;

if (POLLER_ID == 1 || read_config_option('storage_location')) { // @phpstan-ignore-line
	$xport_meta = [];

	$output = rrdtool_function_graph(grv('local_graph_id'), $rra_id, $graph_data_array, null, $xport_meta, $_SESSION[SESS_USER_ID]);

	ob_end_clean();
} else {
	if (isrv('rra_id')) {
		if (gnrv('rra_id') == 'all') {
			$rra_id = 'all';
		} else {
			$rra_id = gfrv('rra_id');
		}
	}

	// get the theme
	if (!isrv('graph_theme')) {
		$graph_data_array['graph_theme'] = cacti_validate_theme(get_selected_theme());
	}

	if (isset($_SESSION[SESS_USER_ID])) {
		$graph_data_array['effective_user'] = $_SESSION[SESS_USER_ID];
	}

	$url  = CACTI_PATH_URL . 'remote_agent.php?action=graph_json';
	$url .= '&local_graph_id=' . grv('local_graph_id');
	$url .= '&rra_id=' . $rra_id;

	foreach ($graph_data_array as $variable => $value) {
		$url .= '&' . rawurlencode((string)$variable) . '=' . rawurlencode((string)$value);
	}

	$output = call_remote_data_collector(1, $url);
}

$oarray = ['type' => $gtype, 'local_graph_id' => grv('local_graph_id'), 'rra_id' => $rra_id];

if ($output !== false && $output != '') {
	$decoded = remote_graph_json_envelope($output);

	if (is_array($decoded)) {
		unset($decoded['type'], $decoded['local_graph_id'], $decoded['rra_id']);
		$oarray = array_merge($decoded, $oarray);
		// No further parsing needed if it was already JSON
	} elseif (str_contains($output, 'image = ')) {
		// Find the beginning of the image definition row
		$image_begin_pos = strpos($output, 'image = ');

		// Parse and populate everything before the image definition row
		if ($image_begin_pos > 0) {
			$header_lines = explode("\n", substr($output, 0, $image_begin_pos));
		} else {
			$header_lines = [];
		}

		// Check for additional data points from graphv output
		$graph_start_pos = strpos($output, 'graph_start =', (int) $image_begin_pos);

		if (!$graph_start_pos) {
			// Find the end of the line of the image definition row, after this the raw image data will come
			$image_data_line_end = strpos($output, "\n", (int) $image_begin_pos);

			if ($image_data_line_end !== false) {
				$image_data_pos = $image_data_line_end + 1;

				// Insert the raw image data to the array
				$oarray['image'] = base64_encode(substr($output, $image_data_pos));
			}
		} else {
			// Find the end of the line of the image definition row, after this the raw image data will come
			$image_data_line_end = strpos($output, "\n", (int) $image_begin_pos);

			if ($image_data_line_end !== false) {
				$image_data_pos = $image_data_line_end + 1;

				// Insert the raw image data to the array
				$oarray['image'] = base64_encode(substr($output, $image_data_pos, $graph_start_pos - $image_data_pos));
			}

			// Get the datapoints to the end of the file.
			$datapoints_start_pos = strpos($output, 'datapoints =');

			if ($datapoints_start_pos !== false) {
				$datapoints = substr($output, $datapoints_start_pos);

				// Get rid of the 'datapoints =' line
				$dp_output = explode("\n", $datapoints);
				unset($dp_output[0]);

				$datapoints = json_decode(implode("\n", $dp_output), true);

				if (is_array($datapoints)) {
					foreach ($datapoints as $name => $value) {
						$oarray[$name] = $value;
					}
				}
			}
		}

		foreach ($header_lines as $line) {
			if (str_contains($line, ' = ')) {
				$parts             = explode(' = ', $line);
				$oarray[$parts[0]] = trim($parts[1]);
			}
		}
	} else {
		$output = false;
	}
}

if ($output !== false && $output != '') {
	if (isset($oarray['meta'])) {
		foreach ($oarray['meta']['legend'] as $key => $value) {
			$legend = trim(preg_replace('/[^a-z0-9 _()]/i', '', $value));

			if ($legend) {
				$color                          = (isset($xport_meta['legend'][$legend])) ? $xport_meta['legend'][$legend] : '';
				$oarray['meta']['legend'][$key] = ['legend' => $legend, 'color' => $color];
			} else {
				unset($oarray['meta']['legend'][$key]);
			}
		}
	}

	$replacement_legend = rrdtool_replacement_legend(grv('local_graph_id'));

	if (cacti_sizeof($replacement_legend) && isset($oarray['meta']['legend'])) {
		$oarray['meta']['legend'] = $replacement_legend;
	}

	/**
	 * remove the unknown data and business hours columns from the
	 * output data as it interferes with the hover output.
	 */
	if (isset($oarray['data']) && isset($xport_meta['ignoreItems'])) {
		$new_array = [];

		foreach ($oarray['data'] as $index => $data) {
			foreach ($data as $i => $value) {
				if ($i == 0 || $i > $xport_meta['ignoreItems']) {
					$new_array[$index][] = $value;
				}
			}
		}

		$oarray['data'] = $new_array;
	}
} else {
	// image type now png
	$oarray['type'] = 'png';

	ob_start();

	$graph_data_array['get_error'] = true;

	$null_param = [];

	rrdtool_function_graph(grv('local_graph_id'), $rra_id, $graph_data_array, null, $null_param, $_SESSION[SESS_USER_ID]);

	$error = ob_get_contents();

	ob_end_clean();

	if (read_config_option('stats_poller') == '') {
		$error = __('The Cacti Poller has not run yet.');
	}

	if (isset($graph_data_array['graph_width']) && isset($graph_data_array['graph_height'])) {
		$image = rrdtool_create_error_image((string) $error, $graph_data_array['graph_width'], $graph_data_array['graph_height']);
	} else {
		$image = rrdtool_create_error_image((string) $error);
	}

	if (isset($graph_data_array['graph_width'])) {
		if (isset($graph_data_array['graph_nolegend'])) {
			$oarray['image_width']  = round($graph_data_array['graph_width'] * 1.24, 0);
			$oarray['image_height'] = round($graph_data_array['graph_height'] * 1.45, 0);
		} else {
			$oarray['image_width']  = round($graph_data_array['graph_width'] * 1.15, 0);
			$oarray['image_height'] = round($graph_data_array['graph_height'] * 1.8, 0);
		}
	} else {
		$oarray['image_width'] = round(db_fetch_cell_prepared('SELECT width
			FROM graph_templates_graph
			WHERE local_graph_id = ?',
			[grv('local_graph_id')]), 0);

		$oarray['image_height'] = round(db_fetch_cell_prepared('SELECT height
			FROM graph_templates_graph
			WHERE local_graph_id = ?',
			[grv('local_graph_id')]), 0);
	}

	if ($image != false) {
		$oarray['image'] = base64_encode($image);
	} else {
		$oarray['image'] = base64_encode((string) file_get_contents(__DIR__ . '/images/cacti_error_image.png'));
	}
}

header('Content-Type: application/json');
header('Cache-Control: max-age=15');
$json = json_encode($oarray);
header('Content-Length: ' . strlen((string) $json));
print $json;